Win9x CIH continued

This topic I wanted to write in the continuation of the topic Day CIH.win9x .



Here you can download the source of the virus and the minimum set of files Turbo Assembler 5.0. To create a virus, run the file compil.bat. Check your antivirus on the hero of the last century!

')

Win9x CIH source .



As I understand it, the virus needs to get into the 0th privilege ring of the processor in which the system kernel and driver are running for distribution and operation. Only from the 0th ring you can work directly with iron, bypassing the OS services. But the way that is implemented in a virus will only work in windows 95/98. In NT systems, he will “break his teeth” - he will not be able to get into the memory and start infecting executable files, not to mention harmful actions.



Such viruses cause respect, not that today's generation of Trojans, which can be removed through msconfig from safe mode.